[Samba] krb5.conf in /var/lib/samba/smb_krb5 very different from original

[Arnaud Lesauvage]

Hi all !

I have some problems browsing a samba share from a Canon ImageRunner printer.
It tries to write to a share located on a samba server, configured to authenticate users against a windows 2003 Active directory.
Samba version 3.2.6 is running on opensuse 11.1.

After a lot of search, I tought that maybe it did not support the encryption type requested by my Samba server, so I checked my kerberos configuration.

To my surprise, I found a krb5.conf.MYDOMAIN file in /var/lib/samba/smb_krb5, and this file is quite different from my /etc/krb5.conf file.
For instance, the 'enc_types...' lines do not match.

In /var/lib/samba/smb_krb5/krb5.conf.MYDOMAIN I have

[libdefaults]
        default_realm = MYDOMAIN.LOCAL
        default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
        default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
        preferred_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5


And in /etc/krb5.conf

[libdefaults]
        default_realm           = MYDOMAIN.LOCAL
        clockskew               = 300
        default_tkt_enctypes = des3-hmac-sha1 des-cbc-crc
        default_tgs_enctypes = des3-hmac-sha1 des-cbc-crc


I created the /etc/krb5.conf manually following different tutorials about active directory integration, so I am puzzled to find this totally different configuration here.

So my questions are quite obvious : 
Which one is used by samba for authentication ? 
Where do these configuration parameters come from ?
And, last but not least, how do I change this configuration ?

Thanks a lot for your help !

Regards
--
Arnaud Lesauvage